Jun 6, 2026
OWASP Top 10
Almost everyone in security can name it. Far fewer can say what it actually is. It is not a list of bugs to grep for — it is the t…
Web Hacking → OWASP Top 10
Almost everyone in security can name it. Far fewer can say what it actually is. It is not a list of bugs to grep for — it is the t…
A bug from the 1990s that still leaks databases today. The whole thing comes down to one idea: making the app read your input as i…
SQL injection tricks a database. XSS tricks a browser — someone else’s. The whole game is getting your JavaScript to run in a vict…
Most bugs let you talk to the server. SSRF lets you make the server talk for you — to places you could never reach yourself. And t…